CVE Watch12 nov 2026

CVE-2026-111435

Relative path traversal vulnerability in openEuler iSulad on Linux. This vulnerability is associated with program file src/daemon/modules/i

CVSS

7.4

Alto

EPSS

—

KEV

—

Exploit Today

0-100

Publicado: 12 nov 2026 · Última mod.: 12 nov 2026 · CWE-23

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

Relative path traversal vulnerability in openEuler iSulad on Linux. This vulnerability is associated with program file src/daemon/modules/image/oci/oci_load.c. This issue affects iSulad: through 2.1.6. In oci_load.c, oci_load_process_manifest() does not sanitize the Config path of manifest.json. A malicious tar package can enable the isulad with the root permission to read any file on the host.

Referencias oficiales

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-120495—

—

——0Path traversal in the Synthetic Monitoring "Robotmk" test service of Checkmk <2.5.0p19, <2.4.0p40, and 2.3.0 (EOL) allows an attacker who controls the agent output of a monitored host's check output for a host to inject a crafted robot output to define the contents and location for the generated HTML log, leading to code execution as the site user.1d CVE-2026-125882—

46.3%

——14Relative path traversal vulnerability in N-able N-central allows Path Traversal. This issue affects N-central: before 26.4.1.2d CVE-2026-1182135.9 MED

58.8%

——18Relative path traversal in Windows Deployment Services allows an unauthorized attacker to disclose information over a network.2d CVE-2026-1138186.5 MED

66.9%

——20Relative path traversal in Windows Deployment Services allows an authorized attacker to disclose information over a network.2d CVE-2026-1127628.8 ALT

61.9%

——19Relative path traversal in Windows Print Spooler Components allows an unauthorized attacker to elevate privileges over a network.2d CVE-2026-1055057.8 ALT

32.3%

——10Relative path traversal in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.2d